CC Certificate 

Security Target 

Validation Report 

Assurance Activity 

Administrative Guide 

The TOE is the Enveil ZeroReveal Compute Fabric Server (otherwise referred to as the ZeroReveal Server, or the TOE) software application which communicates to one or more instances of the Enveil ZeroReveal Compute Fabric Client software application via REST API over mutually authenticated HTTPS over TLS.

The TOE is a homomorphic encryption engine for database queries.  In normal database operation, a query is submitted in plain text, and a plain text answer retrieved for the querier.  While the communication between the querier and the database engine itself may be transmitted through a tunnel such as IPsec, TLS, or SSH, the contents of the query are always in plaintext.  The ZeroReveal Compute Fabric Client (evaluated separately) takes an authenticated user’s database query and encrypts it using Enveil’s proprietary homomorphic encryption process.  This encrypted query is passed via a mutually authenticated TLS trusted channel from ZeroReveal Client to ZeroReveal Server.  The encrypted query is never decrypted during this process, which prevents ZeroReveal Server and its owners/administrators from being able to tell what the query was searching for and what items in the database (if any) matched the query. The output of this process is an encrypted response that is sent back to ZeroReveal Client.  In this way, the database itself is not strictly aware of what the query was and no individual point in the chain between the user and the information know what was requested.

The ZeroReveal Server (the TOE) and ZeroReveal Client are evaluated as software applications only and the homomorphic encryption techniques used for the ZeroReveal Client and ZeroReveal Server operations are outside the scope this evaluation.

The diagram below depicts a representative TOE deployment.

Figure 1: Representative TOE Deployment

The TOE has been evaluated on the following host platform:

·        Rocky Linux 8.7 OS on Intel Core i7-10710U (Comet Lake)

Note: The TOE is the application software and required libraries only. The host platforms are not part of the evaluation.

The TOE supports secure connectivity with several other IT environment devices as described below.

Table 1 IT Environment Components

The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Enveil ZeroReveal® Compute Fabric Server v4.6.3 was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 5.  The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 5.  Acumen Security determined that the evaluation assurance level (EAL) for the product is EAL 1.  The product, when delivered and configured as identified in the Enveil ZeroReveal® Compute Fabric Configuration Guide for Common Criteria v3.1, Version 4.6.3 satisfies all of the security functional requirements stated in the Enveil ZeroReveal® Compute Fabric Server v4.6.3 Security Target, v2.1. The project underwent CCEVS Validator review.  The evaluation was completed in May 2024.  Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.

The TOE is the ZeroReveal Compute Fabric Server software that includes the following libraries:

·        Java JSSE Library 8

·        Bouncy Castle FIPS Provider v1.0.2.3

·        Bouncy Castle FIPS TLS Provider v1.0.12.3

·        GMP Library v6.2.0

·        SEAL Homomorphic Encryption Library v3.7.2.0

Additionally, the TOE boundary includes configuration files that include key strings that must be completed to configure the TOE in the evaluated configuration. The configuration files are modified by administrators and are accessed using the local keyboard.

The TOE’s operational environment requires the TOE platform to have:

·        Rocky Linux 8.7 with SELinux installed and running and

·        OpenJDK 8 JRE installed.

The following diagram depicts the TOE and the Operational Environment of the ZeroReveal Compute Fabric Server Host.

Figure 2: ZeroReveal Server Host

The TOE provides the security functionality required by [AppPP] and [TLSPkg].

Cryptographic Support

The TOE performs two kinds of cryptographic functions: those necessary to the operation of the TOEs homomorphic encrypted search function, and those necessary to the operation of the trusted path and trusted channels.  Because the homomorphic encryption functionality is outside the scope of this evaluation, only those cryptographic functions necessary to support the trusted path and trusted channels are described below.

Table 2 TOE Provided Cryptography

Each of these cryptographic algorithms have been validated for conformance to the requirements specified in their respective standards, as identified below.

Table 3 CAVP Algorithm Testing References

User Data Protection

The ZeroReveal Server network communication is restricted to user-initiated communication for responses to API requests from ZeroReveal Clients and accessing the remote database using TLS. Credentials are stored locally, encrypted using AES algorithm in CCM mode.

Identification and Authentication

The ZeroReveal server performs X.509v3 certificate validation functions to authenticate the certificate(s) during the establishment of the TLS trusted channels.

Security Management

Administrators manages the TOE via configuration files on each installation platform.  The access interface and file editor used to modify the files is outside the scope of the TOE.

The TOE does not include any predefined or default credentials and utilizes the platform recommended storage process for configuration files.

Privacy

The TOE does not collect or transmit Personally Identifiable Information (PII) over the network.

Protection of the TSF

The TOE leverages platform provided package management for secure installation and updates.  The TOE installation package includes only those third-party libraries necessary for its intended operation.  The TOE utilizes compiler-provided anti-exploitation capabilities.

Trusted Path/Channels

The TOE communicates to the ZeroReveal® Compute Fabric Client via REST API over mutually authenticated HTTPS over TLS and stores data in a remote database using TLS.  Administrators configure the TOE via local access only, making changes to configuration files.

Vendor Information